PT-2020-5332 · X.Org+8 · X.Org Server+8
Jan-Niklas Sohn
·
Published
2020-08-25
·
Updated
2024-06-15
·
CVE-2020-14362
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
X.Org Server versions prior to 1.20.9
Description
A flaw was found in the X.Org Server, where an integer underflow can lead to a heap-buffer overflow, potentially resulting in a privilege escalation issue. The highest threat from this issue is to data confidentiality and integrity, as well as system availability. The vulnerability is related to the
SProcRecordQueryVersion function in the record.c file of the X Window System Xorg-server, which is associated with an integer overflow value. Exploitation of the vulnerability could allow an attacker to access confidential data, compromise data integrity, and cause a denial of service.Recommendations
For versions prior to 1.20.9, update to version 1.20.9 or later to resolve the issue. As a temporary workaround, consider restricting access to the
SProcRecordQueryVersion function in the record.c file until a patch is available.Exploit
Fix
Integer Overflow
Integer Underflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Almalinux
Centos
Linuxmint
Red Hat
Rocky Linux
Suse
Ubuntu
X.Org Server